Cloud-native services face unique cybersecurity challenges due to their distributed
infrastructure. They are susceptible to various threats like malware, DDoS attacks, and Man …

Software vulnerabilities inflict considerable economic and societal harm. Therefore, timely
and accurate detection of these flaws has become vital. Large language models (LLMs) …

Open-source software (OSS) vulnerabilities are increasingly prevalent, emphasizing the
importance of security patches. However, in widely used security platforms like NVD, a …

Vulnerabilities from third-party libraries (TPLs) have been unveiled to threaten the Maven
ecosystem in the long term. Despite patches being released promptly after vulnerabilities …

Developers usually use third-party libraries (TPLs) to facilitate the development of their
projects to avoid reinventing the wheels, however, the vulnerable TPLs indeed cause severe …

Open-source software (OSS) greatly facilitates program development for developers.
However, the high number of vulnerabilities in open-source software is a major concern …

In today's software development landscape, the use of third-party libraries is near-
ubiquitous; leveraging third-party libraries can significantly accelerate development …

With the widespread use of third-party code in software projects, Software Composition
Analysis (SCA) tools emerged in order to help developers and security specialists automate …

With the boom in modern software development, open-source software has become an
integral part of various industries, driving progress in computer science. However, the …

Software Composition Analysis has emerged as an essential solution for mitigating
vulnerabilities within the dependencies of software projects. Reachability analysis has been …